$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer File: 2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer (raw, json) Hash identifier: qq7GBBDBI71LCqN9Ou1YFcBa9x2gZuDwL1fO43yRod8= Subject key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D95E8675B91288A5993532EA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 00:45:17 +0000 Certificate not after: Tue 25 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 20320 IP: 206.174.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:e8:67:5b:91:28:8a:59:93:53:2e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 22 00:45:17 2026 GMT Not After : Jul 25 00:45:17 2028 GMT Subject: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:eb:5f:37:5a:de:80:d0:fa:f2:97:f4:64: 0b:d2:ce:6f:38:af:33:68:d7:eb:cd:14:40:ed:21: 49:5d:63:90:53:0e:67:3b:8e:70:49:16:5e:02:15: 26:ee:07:33:83:5f:91:40:3e:6d:c9:52:fa:2f:1d: 6b:30:1f:ab:6f:2e:34:b4:39:75:6f:76:e3:8c:00: 10:b1:d6:ce:13:d3:ec:48:75:0a:97:1b:93:9c:7d: b5:b3:fb:18:7b:46:61:a5:f2:cf:98:24:73:57:08: e8:6b:17:42:52:35:12:91:38:0d:94:a8:6c:df:44: 72:4a:7c:92:0d:19:81:0a:7e:52:32:54:1d:08:d1: a6:d7:bd:4e:05:ed:ec:19:60:ab:ff:d6:03:2a:16: ea:c4:1f:b5:e3:62:63:78:f7:25:fa:d9:73:cc:ae: 57:1b:5f:ed:86:d5:3a:c1:fb:20:13:b8:8d:9f:c5: f2:22:8e:de:93:89:25:1d:92:27:dd:9e:8d:c2:9a: 35:20:f6:60:3f:02:a0:19:3e:0b:4e:41:99:db:f7: 59:c6:e9:6a:97:44:72:59:a5:46:25:88:e9:fa:f7: 74:0f:9f:f1:d8:31:90:2c:c2:00:c6:97:a2:8c:9b: 40:d7:28:46:ec:36:1c:cd:fc:16:e7:64:1e:fd:b0: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 206.174.128.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20320 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:23:f1:6f:e8:de:75:b6:64:79:7e:06:be:0f:9d:9b:35:c4: e2:2b:5b:a1:46:ac:4d:af:c6:38:57:31:d6:11:14:32:ef:b8: 60:4c:c5:95:d8:62:dd:07:b9:72:39:90:5e:0c:74:cf:b4:45: 3d:04:f9:a3:c3:e2:36:3b:30:23:77:fb:3f:ce:17:61:9a:f1: 96:ca:69:23:f9:d0:38:3e:a1:4a:10:22:95:24:d2:85:51:f9: 4b:a2:bf:dd:c1:e5:cb:9c:d4:0e:9d:8c:6f:01:c3:61:0a:14: 89:82:d9:d4:35:fc:58:5a:0d:8a:9c:8e:d8:87:d6:0e:5c:6f: 00:b1:fd:8a:99:24:2b:c5:d6:6d:6d:38:b5:dd:38:c0:c7:4d: d1:21:e2:f3:ac:13:dd:97:33:d8:2f:05:5f:f9:04:6f:94:98: 46:46:ed:ee:e7:4c:e1:9b:d1:5b:3e:10:f8:06:5c:98:9c:2b: 05:46:2c:34:93:44:45:8f:67:65:b6:88:29:72:33:cf:db:a9: b3:f8:d0:8b:9d:13:0a:6d:d6:d2:4f:8e:4d:64:ed:ec:45:23: 52:2d:53:f4:42:6f:de:3f:04:bf:82:41:17:54:34:92:ea:35: bb:cc:f6:b6:74:3b:ec:35:e5:8d:48:6e:4a:0d:dc:c2:c6:46: ca:c0:97:66 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE2V6GdbkSiKWZNTLqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyMjAwNDUxN1oXDTI4MDcyNTAwNDUxN1owLzEtMCsGA1UEAxMk MmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVlMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmfrXzda3oDQ+vKX9GQL0s5vOK8zaNfrzRRA 7SFJXWOQUw5nO45wSRZeAhUm7gczg1+RQD5tyVL6Lx1rMB+rby40tDl1b3bjjAAQ sdbOE9PsSHUKlxuTnH21s/sYe0ZhpfLPmCRzVwjoaxdCUjUSkTgNlKhs30RySnyS DRmBCn5SMlQdCNGm171OBe3sGWCr/9YDKhbqxB+142JjePcl+tlzzK5XG1/thtU6 wfsgE7iNn8XyIo7ek4klHZIn3Z6Nwpo1IPZgPwKgGT4LTkGZ2/dZxulql0RyWaVG JYjp+vd0D5/x2DGQLMIAxpeijJtA1yhG7DYczfwW52Qe/bBCdQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFG3E0In/+rDWLAlqESxAcHXUY3vTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y ZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJmZTllZDFjLWRkNGYtNGUxZS04 ZTI2LTIwMTQzMzRlZTI2NS8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0 ZWUyNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXOroAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC T2AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWiPxb+jedbZkeX4Gvg+dmzXE4itboUasTa/GOFcx1hEUMu+4 YEzFldhi3Qe5cjmQXgx0z7RFPQT5o8PiNjswI3f7P84XYZrxlsppI/nQOD6hShAi lSTShVH5S6K/3cHly5zUDp2MbwHDYQoUiYLZ1DX8WFoNipyO2IfWDlxvALH9ipkk K8XWbW04td04wMdN0SHi86wT3Zcz2C8FX/kEb5SYRkbt7udM4ZvRWz4Q+AZcmJwr BUYsNJNERY9nZbaIKXIzz9ups/jQi50TCm3W0k+OTWTt7EUjUi1T9EJv3j8Ev4JB F1Q0kuo1u8z2tnQ77DXljUhuSg3cwsZGysCXZg== -----END CERTIFICATE-----Generated at Tue May 12 22:09:38 2026 by rpki-client